Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa
File:                     eccc8711-7d7a-305d-b9da-a967dd11d788.roa (raw, json)
Hash identifier:          EYAuAwo4qZ0dVVNn2Drfa5yF2HieUlyyNzybAEjNfTM=
Subject key identifier:   A0:C0:5C:AC:89:74:AE:95:54:EF:38:A3:81:34:BA:C9:41:5C:B3:93
Certificate issuer:       /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial:       010D0C9F4328584F348273DA659BF9D9FFBD1C40
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     395267
IP address blocks:        162.27.159.0/24 maxlen: 24
                          162.27.167.0/24 maxlen: 24
                          162.27.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:73:da:65:9b:f9:d9:ff:bd:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=82954f99-6940-4d77-a318-f7e772b9115d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:5d:6c:9c:e3:1d:61:ea:c8:8a:36:e2:a0:
                    0e:32:da:dc:7f:a9:de:90:a8:09:8e:7a:9f:5d:15:
                    67:0f:d4:31:fd:ec:c1:75:8a:fe:e1:8d:67:e9:ea:
                    69:b5:8b:c6:8b:66:55:e7:dd:d4:6d:e3:6b:cd:b8:
                    c4:49:91:27:98:d3:ae:ae:ab:11:0c:5c:9d:ac:6a:
                    c7:05:ab:8c:30:b8:27:a7:08:06:a4:3f:08:19:39:
                    69:58:90:be:1f:55:6f:1a:a9:4e:f1:4d:2d:39:fa:
                    f3:5f:89:c8:91:38:81:dc:7c:ad:06:0b:20:29:ce:
                    8e:8d:ee:2e:fc:5f:32:85:55:2d:86:84:68:33:62:
                    86:d3:45:36:8c:50:e4:32:58:7d:52:05:89:61:5c:
                    df:9c:2c:bb:a6:8e:36:b4:d4:47:e6:eb:30:a4:90:
                    52:29:cd:32:af:41:ce:a7:4e:80:ad:d7:51:19:2b:
                    51:32:81:6b:57:c9:6f:54:a6:61:65:16:6c:ff:1b:
                    3b:df:28:70:e6:38:57:8e:37:64:75:77:4d:af:c6:
                    19:7a:47:db:89:98:51:7f:b7:e8:ba:ce:2a:7f:1c:
                    1d:eb:54:52:fd:c0:28:ab:68:e7:5f:c5:2e:61:20:
                    76:3a:aa:a5:56:e9:4c:fb:e6:ec:1a:2f:e6:f9:fd:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C0:5C:AC:89:74:AE:95:54:EF:38:A3:81:34:BA:C9:41:5C:B3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl

            X509v3 Authority Key Identifier:
                keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.27.159.0/24
                  162.27.167.0-162.27.168.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:47:2b:39:87:a5:d8:21:ae:5b:09:39:5c:82:d5:4c:95:d8:
         23:80:9d:51:1f:68:66:9f:7a:81:6e:93:6b:a6:b5:d4:8b:c6:
         58:0a:9c:bc:5f:4d:2a:e0:e7:94:00:82:57:d0:ae:94:20:eb:
         cc:51:8a:a9:a0:57:33:18:ef:06:ea:cd:b6:26:18:27:af:bb:
         55:6b:c8:36:6a:44:fb:1a:07:d9:53:40:65:28:17:e0:09:6c:
         d7:d9:c3:f1:9c:a3:28:a5:60:84:0f:fd:3c:ff:cf:65:5d:fc:
         61:2b:d4:2c:be:03:c1:33:ba:19:86:e8:08:f2:45:cf:cc:9b:
         63:f6:f0:31:26:be:7b:dd:84:f3:1c:82:1b:37:66:8e:68:3b:
         d0:66:53:15:1f:e0:4c:99:c2:6d:de:1c:63:25:8d:84:f9:7b:
         1d:73:fe:25:ee:e6:73:48:a6:db:d8:bb:1f:0f:48:36:b6:d5:
         01:71:f3:e2:6b:55:b5:b1:50:d2:2e:10:5a:a1:8e:79:f0:ef:
         be:84:6b:41:2d:06:53:2e:1a:7d:9c:6d:30:bc:10:2a:cc:51:
         61:66:e1:04:4c:88:93:0a:85:c9:23:6a:2f:e6:c9:9e:ed:f8:
         82:76:66:45:57:bd:ce:87:ab:f7:e3:0b:7e:ba:eb:30:d9:0a:
         a0:66:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:21:19 2026 by rpki-client